8da4f60d01e8b97bf8d291cd2659ed3b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8da4f60d01e8b97bf8d291cd2659ed3b_JaffaCakes118
Size

20KB
MD5

8da4f60d01e8b97bf8d291cd2659ed3b
SHA1

116074a850462bce3b58f7341b15e4be60474707
SHA256

4350ca0e0980319415b1501880485277487a92b21071c558ea58208d599d819e
SHA512

e65d205802d5f8f7615beaa43a7b975a75923eb9a29f42fcac0cf282cb42034f3c655b35915e832b14e0e1912c97e45ee9cb2a26f4bfeea23740a224b75847be
SSDEEP

192:b1++co3W3geDkWh2RRfs4RA+ESg0KkrmzrmnkjZLl:b12oG3ge7oHf7JPKkoikjdl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8da4f60d01e8b97bf8d291cd2659ed3b_JaffaCakes118

Files

8da4f60d01e8b97bf8d291cd2659ed3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

44ab183d91047dfdb205bec54260599d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord709
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ